KPMG Consumer Loss Barometer Exposes Data Breach Disconnect

NEW YORK, April 2, 2019 /PRNewswire/ -- The continuous evolution of digital transformation is outstripping the pace of cyber security in organizations. As a result, the market is witnessing a fundamental disconnect between consumer expectations and concerns, and the ability of organizations to meet those expectations, according to KPMG's Consumer Loss Barometer report.

The global survey of more than 2,000 consumers and 1,800 Chief Information Security Officers (CISOs) identified a mismatch between the priorities of CISOs and consumers in the event of a breach.

Consumers continue to have reservations about the possible misuse of their private details.  They are more worried about how these breaches will affect them personally and are less concerned about the impact of a breach on an organization. The survey found 69% of consumers reported concerns about their technology being compromised while 37% of consumers reported having their financial information compromised. On the other hand, 2/3 of CISOs say they prioritize financial loss and reputational risk over the impact on customer trust. 

"It's clear that organizations are still prioritizing their bottom line ahead of consumer expectations and concerns, despite the opportunity to use effective cyber security strategy to build consumer confidence and engagement," says Tony Buffomante, KPMG US Leader, Cyber Security.

When an apology alone may not suffice

In the event of a breach, consumers prefer proof of a fix (42%) over an apology (24%). Conversely, CISOs say they would prioritize an apology (47%) over provision of those details (8%).

Buffomante continued, "Organizations can redesign the relationship with their customers by placing trust at the center of how they do business. By reinforcing consumer trust, this can actually improve a company's ability to retain customers and propel growth. "

Key sector findings:

• Financial services: Almost half (48%) of consumers believe their financial institutions have full or joint responsibility for ensuring that mobile devices used for banking are secure. Regardless if financial institutions see it as their responsibility, they need to show they take the security of their customers' personal information seriously.
• Automotive: 56% of consumers are worried about their car being hacked now whereas 73% are concerned about being hacked five years from now. For a car manufacturer to succeed, it needs to build trust in its ecosystem data security. Car makers are being held accountable for trust in a complex ecosystem – where dealers, software vendors, hardware vendors, telecommunications providers and, ultimately consumers, all have differing perspectives of the role they play in ensuring vehicle security.
• Retail: Alarmingly, 71% of consumers are more concerned about retailers misusing their personal information than information being taken by hackers (68%). This highlights a societal lack of trust in business that organizations must address.

Other notable findings:

• Value within the organization: The vast majority, 83%, of CISO respondents brief the board on at least a quarterly or semi-annual basis demonstrating that executives now rate cyber security threats as a significant risk to organizational growth. But when cyber is omitted from the digital business value chain, a trust ecosystem is not delivered and a significant commercial opportunity is missed.
• Cloud and connected devices: 75% of consumers believe there should be additional security and privacy measures embedded into the design of their connected devices. But this does not necessarily translate into action: only 35% limited the use of sensitive, personal data on their devices and only 35% were willing to pay a higher price for more secure devices.
• Mobile technologies: 75% of consumers said they were concerned about theft or misuse of personal information collected by their mobile device. Mobile device makers and network providers can differentiate themselves by building consumer trust in digital channels for such sectors as healthcare and banking, not just in the mobile products and services they provide.

To view additional information about the report, please visit Consumer Loss Barometer. 

About the survey: The data published in this report are based on a survey of 1,802 CISOs (or equivalent) in 24 markets, across 12 industries.  The respondents were from companies with annual revenues between US$100 million to US$10 billion or more. Consumer data was based on a survey of 2,151 consumers in 24 markets. The sample included all age categories, with a higher percentage of Millennials and Gen Xers, as well as being diversified by gender. 

About KPMG LLP

KPMG is one of the world's leading professional services firms, providing innovative business solutions and audit, tax, and advisory services to many of the world's largest and most prestigious organizations. KPMG is widely recognized for being a great place to work and build a career. Our people share a sense of purpose in the work we do, and a strong commitment to community service, inclusion and diversity, and eradicating childhood illiteracy. KPMG LLP is the independent U.S. member firm of KPMG International Cooperative ("KPMG International"). KPMG International's independent member firms have 207,000 professionals working in 153 countries and territories. Learn more at www.kpmg.com/us.

SOURCE KPMG LLP

Related Links

http://www.kpmg.com/us